$configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
include_once($configPath);
$error = true;
$id_modulo = "allegati";
$cmd_info = AlboFornitori::getInfoModulo($id_modulo);
if (!empty($_POST) && !empty($_SESSION["utente"]) && $_SESSION["utente"]->permission($cmd_info["modulo_riferimento"]) && $_SESSION["utente"]->permission($radice,$_POST["codice"],$id_modulo) && tokenVerify()) {
$errori_upload = array();
$elenco = AlboFornitori::init($_POST["codice"]);
if (!empty($elenco)) {
$record = $elenco->info;
$lock = $elenco->checkLock($cmd_info["id"]);
if (isset($_POST["allegato-public"])) {
foreach($_POST["allegato-public"] as $allegato) {
if (filesManager::saveFile($allegato["filename"],$record["codice"],"albo_fornitori-public",$allegato["nome"] ?? "","A",$allegato["classificazione"] ?? "") === false) {
$errori_upload[] = $allegato["filename"];
} else {
$elenco->addToLog("UPLOAD",$allegato["filename"]);
}
}
}
if (isset($_POST["allegato-reserved"])) {
foreach($_POST["allegato-reserved"] as $allegato) {
if (filesManager::saveFile($allegato["filename"],$record["codice"],"albo_fornitori-reserved",$allegato["nome"] ?? "","A",$allegato["classificazione"] ?? "") === false) {
$errori_upload[] = $allegato["filename"];
} else {
$elenco->addToLog("UPLOAD",$allegato["filename"]);
}
}
}
if (empty($errori_upload)) {
$error = false;
?>
swal({title:js_dict["success-msg"],type:"success"}).then(function(){ window.location.href="/backend/albo_fornitori/panel.php?codice== $record["codice"] ?>"; });
} else {
$error = false;
?>
swal({title:js_dict.error,html:"= __("Errore upload") ?>:
= implode("
",$errori_upload) ?>",type:"error"});
}
}
}
if ($error) {
header('HTTP/1.0 403 Forbidden');
die();
}
?>